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74133.1% 735(31).—*f33T MW SffafWl, 2000 ( 2000 371 21) 3ft 3T3 16 % Tim %%3 «IRT 87 %T 
stort ( 2) % T§te (m) sra 333 7Tf%mT 3 tt mit3 3*ft fir fanfcriRsid 7^m t, 3 t p 4T<t :— 

1. Ttr^^n <im 3lU MK^r, — (1) ^9 IWTT 33Tlf&RT 3T3 ^41I yl#j|P|%i (^3 31%-Ml) fwi, 2004 f 1 
(2) ft TRTT^ ft 337T7H 371 3lftll 37T Tr^rTlffn I 

2. yfmrniri.—73 fwff 3, 733337 f% tM ft siftfem- 3 ftt,— 

(37) ' ‘ 3rfqf333 ’ ’ $TJ33T 'MM Sfftlftm, 2000 (2000 33 21) 3Tfft%Tft"; 


(Tl) U ##T7313[” ft 73f33T3J IRJ %7 3RT 3 % 333*3 % 3^TTR ' 

SRT ftfftl 7R33Tf337 33333^ 33 3lfWTF!3 3TfftftcT ft ; 
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(3) “7T733T ZT373’' ft Tft7T%Tf 77379 %ftft9ft Iftft #193% ftlfmR 33 fttft 47T 99919 37737 fftftt ftt ftT^TT WRt 3 ■ 

■sfrgl 3T 7T379T ft; 

(3) ”39% 37m” ft" ft# #39 9lftft9 ft, fftnft 937 91 3Tfft37 lJ%#d 9fftm fft* ft d 1ft 97 f, ftt f^RTT 333J3T % 3 ft! 9 
4HT3K3, 93% ftlT 73^ 9T 9739^ f7?qf 33 f39199 977% ft; 

(m) 33 Tlftf 3TR 3^f %, ^3 fwit 3 3^33 1, 3^ 3fl3Tf33 3^f f, -3lftrf333 3ft*nfacl f, "3# »l3 #t, ^T1 

3lf3f3mi ^ f I 

3, TTlf8^T ^cfdlfH'dh 3Tf4H13. —^9 aif^fWl % 331337 % t373t #33lf337 33 33 7Jlfa3 3311337 

-3i3>' : -p3 3373 '3!T3 33 31^33 '3f3 l ->T’H %3; RT%3 31333 373TH1T 33T f373T 33T 3; I 

4. TTlfSTcl —73 Slf^lWT % 5 P?^rF %%7 371^ #9^7 WTW33 7Jlf%3 >[3173 3731^1 W?3 ^1331 

713 33% f%7, %HfdRdd 3f%3T %7 WI n 1%3T t I3T 31%^ : — 
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MINISTRY OF COMMUNICATIONS AND INFORMATION TECHNOLOGY 
(Department of Information Technology) 

NOTIFICATION 

New Delhi, die 29th October, 2004 

r s R 735(E) -In exercise of (he powers conferred by clause (e) of sub-seclion (2) of Section 87, read with 
Section 16 Trite Informubon Technology Act. 2000 (21 of 2000), the Central Coven,moot hereby ..takes the following ntles, 

1. Short title and commencement—(1) Theserules may be called the Information Technology (Security Proce- 
dure) Rides, 2004. 

(2) They shall come into force on the date of their publication in the Official Gazette. 

2, Definitions.—In these rules, unless the context otherwise i equircs, 

(a) "Acf means the Information Technology Act, 2000 (21 ol 2000), 

,b) -digital signature” means authentication of any electronic record by a subscriber by means of an elec- 

(b) SL or procedure in accordance with the provisions of Section 3 ot the Act; 

(c) "hardware token” means a token which can be connected to any computer system using Universal Senal 
Bus (USB) port; 

(d) “smart end” means a device containing one or more integrated circuit chips, which periom, the Umcttons 
of a computer’s centre processor, memory and input or output interlace, 

(c) words and expressions used in these rules and not defined but defined in the Act shall have the meaning 
respectively assigned to them in tire Act. 

3. Secure electronic rccord.-An eleclronic record shall be deemed to be a secure electro,tic record for the 
purposes of the Act if it has been authenticated by means ot a secure digital signature. 

" 4. Secure digital S ignature.-A digital signature shallbe deemed to be a secure digital signature for the pur- 

poses of the Act if the following procedure has been applied to it, namely 

(a) that the smart card orltardwarc token, as the case may be, will, cryptographic module, in it, is used to create, ,c 
key pair; 

(b) that the private key used to create the digital signature always remains in the smart card or hardware token as 
tiie case may be; 
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(c) dial the hash of the content to be signed is taken from die host system to the smart card or hardware token and 
the private key is used to create the digital signature and die signed hash is returned to die host system; 

(d) thai the information contained in the smart card or hardware token, as the case may be, is solely under die 
control of die person who is purported to have created the digital signature; 

(e) dial die digital signature can be verified by using die public key listed in the Digital Signature Certificate issued 
to that person; 

1 1) that the standards referred to in rule 6 of the information T echnology (Certifying Authorities) Rules, 2000 have 
been complied with, in so far as they relate to die creation, storage and transmission of the digi tal signature; 
and 

(o) that the digital signature is linked to die electronic record in such a manner dial if die electronic record was 
altered the digital signature would be invalidated. 

[F. No. 9(8)/2003-EC| 
S. LAKSHM(NARAYANAN, Addl. Secy. 
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